2024-04-24_a29b4e73afa09890850d2cb52346e29a_cryptolocker
- SHA256 69e55199015bbab8bfc5b3e496526fff6dc05767d8dbad88dafc784ee437444a
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Unsigned PE
Checks for missing Authenticode signature.
generic
count=11, id=29, productName=VS2002 (.NET) build 9466, version=9466,
count=148, productName=Unmarked objects (old),
count=4, id=64, productName=VS2002 (.NET) build 9466, version=9466,
count=4, id=15, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=11, id=95, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=687, id=96, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) SP1 build 6030, version=6030,